Skip to content
OpenAdvisories
Unscored CVE-2019-12455 EUVD-2019-4063GHSA-r2qx-grq5-8x3g

An issue was discovered in sunxi_divs_clk_setup in drivers/clk/sunxi/clk-sunxi.c in the Linux kernel through 5.1.5. There is an unchecked k…

Published May 30, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

An issue was discovered in sunxi_divs_clk_setup in drivers/clk/sunxi/clk-sunxi.c in the Linux kernel through 5.1.5. There is an unchecked kstrndup of derived_name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). NOTE: This id is disputed as not being an issue because “The memory allocation that was not checked is part of a code that only runs at boot time, before user processes are started. Therefore, there is no possibility for an unprivileged user to control it, and no denial of service.”

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux No fix yet —
Debian 13 linux No fix yet —
Debian 12 linux No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu Pro 14.04 LTS linux +3 No fix yet —

References